Privacy Policy
Last updated 3 November 2026
This policy explains what personal data Yumba Software Ltd collects through this website and the Yumba platform, why we collect it, and the rights you have over it. We follow Uganda's Data Protection and Privacy Act, 2019 and its regulations.
Who we are
Yumba Software Ltd ("Yumba", "we", "us") is a company based in Kampala, Uganda. We make rent-management software for property managers and landlords. For any question about this policy or your data, contact us athello@yumbatech.com or +256 781 564 218.
What we collect
- When you fill in a form on this website: your name, company or business name, phone number, email address, whether you are a property manager or landlord, the number of units you manage and the number of property owners you manage for.
- When you visit this website: anonymous usage statistics, such as pages viewed, buttons clicked, browser type, device type and country. We use Umami analytics, which does not use cookies and does not identify you personally.
- When you use the Yumba platform: the account details you give us, and the property, unit, tenant and payment records you or your staff enter.
Why we use it
- To reply to your enquiry and arrange a demo.
- To onboard you, including setting up your portfolio and bringing in your existing records.
- To provide, secure and improve the Yumba platform.
- To understand, in aggregate, how people use this website so we can improve it.
Legal basis and consent
We collect form data with your consent, which you give by submitting the form. You can withdraw consent at any time by contacting us. We process platform data to perform our contract with you, and where the law requires us to.
Who processes data for us
We share personal data only with service providers that help us run Yumba, and only as needed:
- Formspree, which delivers website form submissions to us.
- Our hosting provider, which runs the servers this website and the Yumba platform use.
- Zoho Mail, which handles our email.
We do not sell personal data.
Where data is stored
Some of these providers store data outside Uganda. Formspree, for example, is based in the United States. Where data leaves Uganda, we take steps to make sure it is protected to a standard at least equivalent to Ugandan law, as the Act requires. [To confirm: the country where our servers are located.]
How long we keep it
We keep enquiry data for as long as we need it to respond to you and onboard you, and platform data for as long as your account is active and for any period the law requires afterwards, for example for tax and accounting records. [To confirm: retention periods.] We then delete or anonymise it.
How we protect it
Data is encrypted in transit (HTTPS). Access to our systems is limited to people who need it. Our servers are hardened, kept up to date and backed up.
Your rights
Under the Act you have the right to:
- ask what personal data we hold about you and get a copy of it;
- ask us to correct data that is inaccurate or incomplete;
- ask us to delete your data;
- object to, or ask us to stop, processing your data.
To use any of these rights, email hello@yumbatech.com. We may need to confirm your identity before we act on a request.
Complaints
If you are unhappy with how we handle your data, please contact us first. You can also complain to Uganda's Personal Data Protection Office (pdpo.go.ug).
Changes to this policy
We may update this policy. We will post the new version on this page with a new "last updated" date, and tell platform users about significant changes.